FriendlyGreeting is Expanding

Julian Field mailscanner at ecs.soton.ac.uk
Thu Nov 14 11:11:21 GMT 2002


At 09:10 14/11/2002, you wrote:
>Should or shouldn't that include LOCAL_RULESETS before the lines below
>that you put in sendmail.mc (they can be put in sendmail.mc right, I
>have never been able to figure out how the .cf files work)

It should come after the LOCAL_RULESETS line in the sendmail.mc file.

>Also where do I put it in sendmail.mc?

Anywhere are LOCAL_RULESETS should work.

>I just added at the bottom of the file, replaced the whitespaces with
>tabs after the last few lines starting from  $* up until the $#error bit.
>Then my mail server simply stopped accepting any mail whatsoever....
>
>May I suggest a 'complete morons guide to stopping FriendlyGreeting cards'
>for people like me? :)
>
>Remco
>
>On Wed, 13 Nov 2002, Julian Field wrote:
>
> > At 16:28 13/11/2002, you wrote:
> > >I am ready to just block all e-mail.
> >
> > Do that and I'll have to go back to collecting things (glasses, clocks,
> > bottles of brandy...)
> > :-)
> >
> > >I attached the two possibilitys now according to Mcafee.  Does anybody
> > >have a long term solution for these guys.  I believe the rule that
> > >Julian suggested adding to spam.assassin.prefs.conf only covers the
> > >first one.
> >
> > I have only seen these two. The second one appeared last week. Updates for
> > sendmail.cf or spam.assassin.prefs.conf are included here for everyone's
> > benefit. If I hear any more news in this I'll let you all know.
> >
> > Stop them in sendmail:
> >
> > HSubject: $>Check_Subject
> > D{FriendPat1}you have an E-Card from
> > D{FriendPat2}you have a greeting card from
> > D{FriendMsg}This message is probably a nasty E-Card.
> > SCheck_Subject
> > R$* ${FriendPat1} $*            $#error $@ 5.7.1 $: ${FriendMsg}
> > R$* ${FriendPat2} $*            $#error $@ 5.7.1 $: ${FriendMsg}
> >
> > Or stop them in SpamAssassin:
> >
> > header   FRIEND_GREETINGS       Subject =~ /you have an E-Card from/i
> > describe FRIEND_GREETINGS       Nasty E-card from FriendGreetings.com
> > score    FRIEND_GREETINGS       100.0
> > header   FRIEND_GREETINGS2      Subject =~ /you have a greeting card from/i
> > describe FRIEND_GREETINGS2      Nasty E-card from FriendGreetings.com
> > score    FRIEND_GREETINGS2      100.0
> >
> > --
> > Julian Field                Teaching Systems Manager
> > jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
> > Tel. 023 8059 2817          University of Southampton
> >                              Southampton SO17 1BJ
> >
> >
>
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ



More information about the MailScanner mailing list